PT-2026-30257 · Undefined · Undefined

CVE-2017-20233 · Published 2026-04-03 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Hirschmann HiLCOS OpenBAT (affected versions not specified) Hirschmann HiLCOS BAT450 (affected versions not specified) Hirschmann HiLCOS WLC (affected versions not specified) Hirschmann HiLCOS BAT867 (affected versions not specified)

Description A firewall filtering issue exists where IPv4 multicast and broadcast traffic is not correctly filtered when management IP address filtering is disabled. This allows configured filter rules to be bypassed, enabling attackers with network access to inject or observe multicast and broadcast packets that should have been blocked by the firewall.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2017-20233

Affected Products

Undefined

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-20233 · Security Note
• https://assets.belden.com/m/11a07596f0bf1018/original/Security-Bulletin-IPv4-Multicast-HiLCOS-Layer-2-Firewall-BSECV-2017-03.pdf · Note
• https://vulncheck.com/advisories/hirschmann-hilcos-layer-2-firewall-multicast-broadcast-traffic-bypass · Note
• https://t.me/cveNotify/208450 · Telegram Post